From nobody Tue Jan 5 21:26:38 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7722E1A92A9 for ; Tue, 5 Jan 2016 21:26:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.312 X-Spam-Level: X-Spam-Status: No, score=-2.312 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zce-V4EsML8m for ; Tue, 5 Jan 2016 21:26:35 -0800 (PST) Received: from dmz-mailsec-scanner-3.mit.edu (dmz-mailsec-scanner-3.mit.edu [18.9.25.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73B3B1A9244 for ; Tue, 5 Jan 2016 21:26:33 -0800 (PST) X-AuditID: 1209190e-f79046d0000036c0-81-568ca5878a8c Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id F7.C4.14016.785AC865; Wed, 6 Jan 2016 00:26:31 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id u065QUnt021115 for ; Wed, 6 Jan 2016 00:26:31 -0500 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u065QSZc021979 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 6 Jan 2016 00:26:30 -0500 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id u065QRKu011446; Wed, 6 Jan 2016 00:26:27 -0500 (EST) Date: Wed, 6 Jan 2016 00:26:27 -0500 (EST) From: Benjamin Kaduk To: kitten@ietf.org Message-ID: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrDIsWRmVeSWpSXmKPExsUixCmqrNu+tCfM4N4rbYujm1exODB6LFny kymAMYrLJiU1J7MstUjfLoErY+v7A2wFn7kqPu7qYmtg7OHsYuTkkBAwkTiy7BULhC0mceHe erYuRi4OIYHFTBJz1ixmA0kICRxjlGi9zAJhX2eS+DlfpIuRA8iulzgzNwYkzCKgJXF4+1uw cjYBFYmZbzaC2SICwhK7t75jBrGFBcwlpi74ww5i8wo4Sry7s44VxBYV0JFYvX8KC0RcUOLk zCdgNjPQzOXTt7FMYOSbhSQ1C0lqASPTKkbZlNwq3dzEzJzi1GTd4uTEvLzUIl1jvdzMEr3U lNJNjOBAkuTbwfj1oNIhRgEORiUeXgGZnjAh1sSy4srcQ4ySHExKorzrVnaHCfEl5adUZiQW Z8QXleakFh9ilOBgVhLhDSkGKudNSaysSi3Kh0lJc7AoifPO/eIbJiSQnliSmp2aWpBaBJOV 4eBQkuB9uwSoUbAoNT21Ii0zpwQhzcTBCTKcB2j4K5Aa3uKCxNzizHSI/ClGRSlxXj+QhABI IqM0D64XHOm7mVRfMYoDvSLMywOMeyEeYJKA634FNJgJaDBDUTfI4JJEhJRUA6Pc7TUnNTbn LP997qHr5v12c+P6LmlXLl31UFx82gIL1afvrRnTefjveTZ2fjTU0lw1b64yc4h9+LUNk1Nm zeDc/Tta0Gb21MVSC76un7tU1+32aT6nM+81Ct8Za5/grN4tK/p8/dOJVR9mOf/4cJfnt4xm 01KrzS/r77lxLm4LbwhICTCYFD1HiaU4I9FQi7moOBEAQ+A/as8CAAA= Archived-At: Subject: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jan 2016 05:26:37 -0000 This message begins the third Working Group Last Call (WGLC) of "AES Encryption with HMAC-SHA2 for Kerberos 5" . Previous WGLCs were held for versions 06 and 02 of this document. Review during the second WGLC raised some issues that required changes to the content of the document, so another WGLC is needed. The WGLC will last two weeks, ending on Wednesay, January 20th. The draft is available at: https://tools.ietf.org/html/draft-ietf-kitten-aes-cts-hmac-sha2-08 A diff of the changes since the previous WGLC is available at: https://tools.ietf.org/rfcdiff?url2=draft-ietf-kitten-aes-cts-hmac-sha2-08.txt&url1=draft-ietf-kitten-aes-cts-hmac-sha2-06.txt Please review the document and send comments to the Working Group mailing list kitten@ietf.org or the co-chairs kitten-chairs@ietf.org before the end of the WGLC. Any and all comments on the document are sought in order to access the strength of consensus. Even if you have read and commented on this or earlier versions of the draft, please feel free to comment again. This is particularly important if you found issues with the previous version. As a reminder, comments can be anything from "this looks fine" to "this is a horrible idea"; they can include suggestions for minor editorial corrections to significant editorial changes. - Your Kitten Chairs From nobody Wed Jan 13 16:19:58 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD0AB1A9074 for ; Wed, 13 Jan 2016 16:19:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.802 X-Spam-Level: X-Spam-Status: No, score=-2.802 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id teob7jaGbBA4 for ; Wed, 13 Jan 2016 16:19:54 -0800 (PST) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65B491A013F for ; Wed, 13 Jan 2016 16:19:54 -0800 (PST) X-AuditID: 12074423-f797f6d0000023d0-5b-5696e9a8e0fb Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 6E.41.09168.8A9E6965; Wed, 13 Jan 2016 19:19:52 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id u0E0JqVF003715 for ; Wed, 13 Jan 2016 19:19:52 -0500 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u0E0JnWc004343 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 13 Jan 2016 19:19:51 -0500 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id u0E0JnIJ011540; Wed, 13 Jan 2016 19:19:49 -0500 (EST) Date: Wed, 13 Jan 2016 19:19:48 -0500 (EST) From: Benjamin Kaduk To: kitten@ietf.org In-Reply-To: Message-ID: References: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrOIsWRmVeSWpSXmKPExsUixG6norvi5bQwg7n7LSyObl7F4sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujClPd7IUTOGp2DTTuoHxF2cXIyeHhICJxNozD1khbDGJC/fW s3UxcnEICSxmknjz6R8ThHOcUeJV3w1mCOcGk8TOK69ZIJwGRonN61awgPSzCGhLTFy5F8xm E1CRmPlmIxuILSIgLLF76ztmEFtYwFpixZL1TCA2p4CTxPxn68BqeAUcJdZNmQpmCwHZX349 ZASxRQV0JFbvn8ICUSMocXLmEzCbWUBLYvn0bSwTGAVmIUnNQpJawMi0ilE2JbdKNzcxM6c4 NVm3ODkxLy+1SNdMLzezRC81pXQTIzj8XJR3MP45qHSIUYCDUYmHd8HtaWFCrIllxZW5hxgl OZiURHnnXgIK8SXlp1RmJBZnxBeV5qQWH2KU4GBWEuF1BynnTUmsrEotyodJSXOwKInzfquc EiYkkJ5YkpqdmlqQWgSTleHgUJLgtXsB1ChYlJqeWpGWmVOCkGbi4AQZzgM03P85yPDigsTc 4sx0iPwpRkUpcd4kkGYBkERGaR5cLzg97GZSfcUoDvSKMK8/SBUPMLXAdb8CGswENNgibjLI 4JJEhJRUA+PJhM/elZUrHjEEyDe36du+8jgi+WT357fGT/+avePsYP10S0nFNJ9nzfQttoU8 Dycuzd737Wye40T2wBzrkLK4ndbvWWe0B352aq0WmrTv+LksZe0kow2W74of8om9u3VeeOPr 18p/K249e+uj+NN9c8iefdHSwSrRp3RPlU5fyHmlk0FXbK0SS3FGoqEWc1FxIgAQMWEs6gIA AA== Archived-At: Subject: Re: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jan 2016 00:19:57 -0000 Just a reminder: only one week remains in this WGLC. -Ben On Wed, 6 Jan 2016, Benjamin Kaduk wrote: > This message begins the third Working Group Last Call (WGLC) of "AES > Encryption with HMAC-SHA2 for Kerberos 5" > . Previous WGLCs were held for > versions 06 and 02 of this document. Review during the second WGLC raised > some issues that required changes to the content of the document, so > another WGLC is needed. The WGLC will last two weeks, ending on Wednesay, > January 20th. The draft is available at: > > https://tools.ietf.org/html/draft-ietf-kitten-aes-cts-hmac-sha2-08 > > A diff of the changes since the previous WGLC is available at: > > https://tools.ietf.org/rfcdiff?url2=draft-ietf-kitten-aes-cts-hmac-sha2-08.txt&url1=draft-ietf-kitten-aes-cts-hmac-sha2-06.txt > > Please review the document and send comments to the Working Group mailing > list kitten@ietf.org or the co-chairs kitten-chairs@ietf.org before the > end of the WGLC. Any and all comments on the document are sought in order > to access the strength of consensus. Even if you have read and commented > on this or earlier versions of the draft, please feel free to comment > again. This is particularly important if you found issues with the > previous version. > > As a reminder, comments can be anything from "this looks fine" to "this is > a horrible idea"; they can include suggestions for minor editorial > corrections to significant editorial changes. > > > - Your Kitten Chairs > From nobody Fri Jan 15 09:26:04 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6DD51B3037 for ; Fri, 15 Jan 2016 09:26:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VdDn2z_iIGfM for ; Fri, 15 Jan 2016 09:26:02 -0800 (PST) Received: from dmz-mailsec-scanner-8.mit.edu (dmz-mailsec-scanner-8.mit.edu [18.7.68.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 133FC1B302F for ; Fri, 15 Jan 2016 09:26:01 -0800 (PST) X-AuditID: 12074425-f793c6d000006975-01-56992ba847c5 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-8.mit.edu (Symantec Messaging Gateway) with SMTP id AF.12.26997.8AB29965; Fri, 15 Jan 2016 12:26:00 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id u0FHPxZY003233; Fri, 15 Jan 2016 12:26:00 -0500 Received: from [18.101.8.236] (vpn-18-101-8-236.mit.edu [18.101.8.236]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u0FHPwCw022183 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Fri, 15 Jan 2016 12:25:59 -0500 To: Benjamin Kaduk , kitten@ietf.org References: From: Greg Hudson X-Enigmail-Draft-Status: N1110 Message-ID: <56992BA6.7040309@mit.edu> Date: Fri, 15 Jan 2016 12:25:58 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrFIsWRmVeSWpSXmKPExsUixG6nortCe2aYwdNVWhZHN69icWD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxsQ3/ewFLdwV+xcdZGtg/MXRxcjBISFgInHlk1gXIyeQKSZx 4d56NhBbSGAxk8TeqTYQ9kZGiff7mSHsI0wSv4/Gg9jCAi4SH6/+A6sXETCWuPvzBgtEjaPE l18PGUFsNgFlifX7t7JAzJeT6O2eBGbzCqhJ7OqYB9bLIqAq8e7ZG1aQc0QFIiQW7ciEKBGU ODnzCVg5p4CTxPxn68DKmQX0JHZc/8UKYctLNG+dzTyBUXAWkpZZSMpmISlbwMi8ilE2JbdK NzcxM6c4NVm3ODkxLy+1SNdCLzezRC81pXQTIzhIXVR3ME44pHSIUYCDUYmH9wfnjDAh1sSy 4srcQ4ySHExKorzyGjPDhPiS8lMqMxKLM+KLSnNSiw8xSnAwK4nwrlMCyvGmJFZWpRblw6Sk OViUxHm/VU4JExJITyxJzU5NLUgtgsnKcHAoSfC2aQE1ChalpqdWpGXmlCCkmTg4QYbzAA3/ DFLDW1yQmFucmQ6RP8WoKCXOuwMkIQCSyCjNg+sFJ5FUjjevGMWBXhHmPQ1SxQNMQHDdr4AG MwEN5g2YDjK4JBEhJdXA2MYSmx+tGrTiIrvPogMJmW4aMuKPOXZmdx2xvMrH+VmRN/fbHN/d oVxbr7HMshGvXP2tJytz/x8D+WcOR3Z4meWflNz7OKMyc8r2G+IiPwVYTmnf+7Ci+8oJ6Srf gOUd5p9XX91nkHVd+M+i7geLvWXrJiirme0pfpq4wnjCJdFD+oeljJldlFiKMxINtZiLihMB S7ezIP0CAAA= Archived-At: Subject: Re: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jan 2016 17:26:04 -0000 I did another read-through of the draft. I found some minor issues, which I hope can be resolved without requiring another WGLC. * There is no specification of how to read the string-to-key parameter. RFC 3962 says, "The parameter string is four octets indicating an unsigned number in big-endian order," but this draft does not reference the RFC 3962 string-to-key and just says "iter_count = string-to-key parameter (default is decimal 32768 if not specified)". I assume the intent is to be consistent with RFC 3962. * Section 5 says "specific key structure: three protocol-format keys: { Kc, Ke, Ki }". Kc, Ke, and Ki are not protocol-format keys; Kc and Ki don't even have the same length for aes256. I suggest "three derived keys." * Section 8 says, "The salt and iteration count resist brute force and dictionary attacks, however, it is still important to choose or generate strong passphrases." This is a run-on sentence; the comma preceding "however" should be a semicolon. * Section 8.1 says, "The string-to-key function as defined in [RFC3961] requires the salt to be valid UTF-8 strings." This sentence should end with "a valid UTF-8 string." * Section 8.1 says, "ktutil's add_entry command assumes the default salt." That might be too specific; I suggest "Some key table manipulation programs assume the default salt when adding entries based on passwords." From nobody Fri Jan 15 19:56:14 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 923B01A889C for ; Fri, 15 Jan 2016 19:56:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z95RQ_EL3Q-C for ; Fri, 15 Jan 2016 19:56:11 -0800 (PST) Received: from dmz-mailsec-scanner-3.mit.edu (dmz-mailsec-scanner-3.mit.edu [18.9.25.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5525D1B36E5 for ; Fri, 15 Jan 2016 19:56:09 -0800 (PST) X-AuditID: 1209190e-f79046d0000036c0-02-5699bf57da5c Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id 5D.DE.14016.75FB9965; Fri, 15 Jan 2016 22:56:07 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id u0G3u6om026262; Fri, 15 Jan 2016 22:56:07 -0500 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u0G3u3Ta022774 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 15 Jan 2016 22:56:06 -0500 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id u0G3u3v0010108; Fri, 15 Jan 2016 22:56:03 -0500 (EST) Date: Fri, 15 Jan 2016 22:56:03 -0500 (EST) From: Benjamin Kaduk To: Greg Hudson In-Reply-To: <56992BA6.7040309@mit.edu> Message-ID: References: <56992BA6.7040309@mit.edu> User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrCIsWRmVeSWpSXmKPExsUixCmqrBu+f2aYwaX1KhZHN69icWD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxo7Ve9gK9vNW/N7/iqmB8TFXFyMnh4SAicSrp8+YIWwxiQv3 1rN1MXJxCAksZpLYdG01O4SzkVGif/MDFgjnEJPEn4vrmCCcBkaJnZMbGEH6WQS0JQ6uOQ9m swmoSMx8s5ENxBYRUJT4vfItWJxZQFhi/bkZYPuEBVwkPl79B1bDKaAusXFaIyuIzSvgKDH1 +xGwGiGBGIn/Sw6C2aICOhKr909hgagRlDg58wkLxEwtieXTt7FMYBSchSQ1C0lqASPTKkbZ lNwq3dzEzJzi1GTd4uTEvLzUIl1jvdzMEr3UlNJNjODAlOTbwfj1oNIhRgEORiUe3g2OM8OE WBPLiitzDzFKcjApifLu2gAU4kvKT6nMSCzOiC8qzUktPsQowcGsJMK7pwEox5uSWFmVWpQP k5LmYFES5/1WOSVMSCA9sSQ1OzW1ILUIJivDwaEkwWuxD6hRsCg1PbUiLTOnBCHNxMEJMpwH aLgdSA1vcUFibnFmOkT+FKOilDhvLEhCACSRUZoH1wtOHLuZVF8xigO9IswbAFLFA0w6cN2v gAYzAQ3mDZgOMrgkESEl1cDYefhU5KLN65v/tm48ll5maHC97Nz7u7yuZvO0O5dvT63c+4pT d9Jrvk0ZYj/Uk948ePxYYf+qrRVKOyM6jP7q5KhYPfaMyec+aO50/M6ZY5+mnD3KPO9YihyX tK500I5jrZsMti4v+MT2PjWBSUvBKeLm/VerPx6/Gu6opvx5DoPLz5YHj4pylViKMxINtZiL ihMBMfUbs/cCAAA= Archived-At: Cc: kitten@ietf.org Subject: Re: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jan 2016 03:56:13 -0000 Thanks for the review, Greg. On Fri, 15 Jan 2016, Greg Hudson wrote: > I did another read-through of the draft. I found some minor issues, > which I hope can be resolved without requiring another WGLC. Assuming that the intent is to be consistent with RFC 3962 for the string-to-key parameter, I expect that these notes can be resolved without the need for an additional WGLC. -Ben > * There is no specification of how to read the string-to-key parameter. > RFC 3962 says, "The parameter string is four octets indicating an > unsigned number in big-endian order," but this draft does not reference > the RFC 3962 string-to-key and just says "iter_count = string-to-key > parameter (default is decimal 32768 if not specified)". I assume the > intent is to be consistent with RFC 3962. > > * Section 5 says "specific key structure: three protocol-format keys: { > Kc, Ke, Ki }". Kc, Ke, and Ki are not protocol-format keys; Kc and Ki > don't even have the same length for aes256. I suggest "three derived keys." > > * Section 8 says, "The salt and iteration count resist brute force and > dictionary attacks, however, it is still important to choose or generate > strong passphrases." This is a run-on sentence; the comma preceding > "however" should be a semicolon. > > * Section 8.1 says, "The string-to-key function as defined in [RFC3961] > requires the salt to be valid UTF-8 strings." This sentence should end > with "a valid UTF-8 string." > > * Section 8.1 says, "ktutil's add_entry command assumes the default > salt." That might be too specific; I suggest "Some key table > manipulation programs assume the default salt when adding entries based > on passwords." > > From nobody Mon Jan 18 17:24:20 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE3561A876E for ; Mon, 18 Jan 2016 17:24:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.467 X-Spam-Level: X-Spam-Status: No, score=-0.467 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wMm9cfsjPjd1 for ; Mon, 18 Jan 2016 17:24:18 -0800 (PST) Received: from homiemail-a74.g.dreamhost.com (sub4.mail.dreamhost.com [69.163.253.135]) by ietfa.amsl.com (Postfix) with ESMTP id 709691A876B for ; Mon, 18 Jan 2016 17:24:18 -0800 (PST) Received: from homiemail-a74.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a74.g.dreamhost.com (Postfix) with ESMTP id 4B73567C06B; Mon, 18 Jan 2016 17:24:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h=date :from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=cryptonector.com; bh=fwGYVrbDZtppf9 RSRD2Jgj0+16k=; b=DGp2IMJHJfWe+xxIHgOAOjknwjuo1DopvzYdZtA3oRHLji 4E2s/L7nYb4fjJH9QaKPkVIyVWLHWAu9DIVNZ6QDCH/8wFH/pEdNajAUg4GUwsfr 7Kuh/8wENIPYVGiM40YOMMBn69mBW6zj9PMtqWpoKDmZGyDjItgnnZQCGO2fg= Received: from localhost (108-207-244-100.lightspeed.austtx.sbcglobal.net [108.207.244.100]) (Authenticated sender: nico@cryptonector.com) by homiemail-a74.g.dreamhost.com (Postfix) with ESMTPA id 9DC6C67C065; Mon, 18 Jan 2016 17:24:17 -0800 (PST) Date: Mon, 18 Jan 2016 19:24:16 -0600 From: Nico Williams To: Greg Hudson Message-ID: <20160119012415.GY6027@localhost> References: <56992BA6.7040309@mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <56992BA6.7040309@mit.edu> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: Cc: kitten@ietf.org Subject: Re: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 01:24:19 -0000 On Fri, Jan 15, 2016 at 12:25:58PM -0500, Greg Hudson wrote: > I did another read-through of the draft. I found some minor issues, > which I hope can be resolved without requiring another WGLC. I did as well. I don't have anything substantial to add to your comments: > * Section 8 says, "The salt and iteration count resist brute force and > dictionary attacks, however, it is still important to choose or generate > strong passphrases." This is a run-on sentence; the comma preceding > "however" should be a semicolon. The use PBKDF2, a salt, and a large iteration count, adds some resistance to off-line dictionary attacks by passive eavesdroppers. Salting prevents rainbow table attacks, while large iteration counts slow password guess attempts. Nonetheless, it is important to choose strong passphrases, and/or to use other Kerberos extensions that protect against off-line dictionary attacks. For example, FAST [RFC6113] with a suitable armor ticket, or a future password- authenticated key exchange (PAKE) pre-authentication method. > * Section 8.1 says, "ktutil's add_entry command assumes the default > salt." That might be too specific; I suggest "Some key table > manipulation programs assume the default salt when adding entries based > on passwords." Even the words "key table" are a bit too specific. The salient point is that non-interaction with the KDC implies not knowing the salt; utilities that need a salt but do not or cannot interact with a KDC to find out what the salt is need a default salt, and that needs to work else such utilities cannot. ktutil in particular could have an option to learn the salt, but if it has to work off-line then it cannot. Lastly, as to not every random salt being a UTF-8 string, it is possible to increase the length of the salt to accomodate any NIST guidance as to entropy content of salts when they are generated. Nico -- From nobody Tue Jan 19 00:13:24 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96F7E1ACF04 for ; Tue, 19 Jan 2016 00:13:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.802 X-Spam-Level: X-Spam-Status: No, score=-2.802 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GsrgZgMhnMLO for ; Tue, 19 Jan 2016 00:13:20 -0800 (PST) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 863CE1ACF03 for ; Tue, 19 Jan 2016 00:13:20 -0800 (PST) X-AuditID: 12074423-f797f6d0000023d0-4e-569df01ec442 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 6C.A9.09168.F10FD965; Tue, 19 Jan 2016 03:13:19 -0500 (EST) Received: from outgoing-exchange-3.mit.edu (outgoing-exchange-3.mit.edu [18.9.28.13]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id u0J8DIM8009594 for ; Tue, 19 Jan 2016 03:13:18 -0500 Received: from W92EXEDGE5.EXCHANGE.MIT.EDU (w92exedge5.exchange.mit.edu [18.7.73.22]) by outgoing-exchange-3.mit.edu (8.13.8/8.12.4) with ESMTP id u0J8DHrM026886 for ; Tue, 19 Jan 2016 03:13:18 -0500 Received: from W92EXHUB16.exchange.mit.edu (18.7.73.27) by W92EXEDGE5.EXCHANGE.MIT.EDU (18.7.73.22) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 19 Jan 2016 03:12:58 -0500 Received: from OC11EXPO27.exchange.mit.edu ([169.254.1.37]) by W92EXHUB16.exchange.mit.edu ([18.7.73.27]) with mapi id 14.03.0235.001; Tue, 19 Jan 2016 03:13:17 -0500 From: Kenneth G Raeburn To: Benjamin J Kaduk Thread-Topic: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 Thread-Index: AQHRSELUNi0DtbcvtESIytCshpO2pp8C5csA Date: Tue, 19 Jan 2016 08:13:16 +0000 Message-ID: <41868462-74A2-4416-81D8-F63781AE1BCF@mit.edu> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.31.203.101] Content-Type: text/plain; charset="utf-8" Content-ID: <3A4C16401726A24886B401903FC1D570@exchange.mit.edu> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPKsWRmVeSWpSXmKPExsUixCmqrSv/YW6YQdtXVoujm1exODB6LFny kymAMYrLJiU1J7MstUjfLoEro6N1FXPBI/GKi1d3sTYwThHvYuTgkBAwkdg8U7OLkRPIFJO4 cG89WxcjF4eQwGImiaOLd7BAONcYJVo3v2aEcO4wStyf9IoJwtnOKDH5/U9WkH4hgVWMEt/a 2EFsNgFNiY1/j4DZIgIqErvaz7OCrGMWUJfYuZsZJCws4CLx8eo/NpCwiICrxNe3qRDVRhKd Xz+DTWQRUJV4/PsyE4jNK2AlsfLgDCaITY4SX349ZASxOQWcJOY/W8cGYjMCffD91BqwGmYB cYlbT+YzQXwmKLFo9h5mmC//7XrIBmErSuw7tpAZ4jJNifW79CFa7SUutB5hhbAVJaZ0P2SH OEFQ4uTMJywTGKVmIdkwC6F7FpLuWUi6ZyHpXsDIuopRNiW3Sjc3MTOnODVZtzg5MS8vtUjX TC83s0QvNaV0EyMoXtldlHcw/jmodIhRgINRiYf3pePcMCHWxLLiytxDjJIcTEqivA5PgUJ8 SfkplRmJxRnxRaU5qcWHGCU4mJVEeIMeAuV4UxIrq1KL8mFS0hwsSuK8uzqAUgLpiSWp2amp BalFMFkZDg4lCV7W90BZwaLU9NSKtMycEoQ0EwcnyHAeoOH734EMLy5IzC3OTIfIn2JUlBLn 3QaSEABJZJTmwfWC0ym7p9grRnGgV4R5w0BW8ABTMVz3K6DBTECDf3rMBhlckoiQkmpg3HPk 28djJzz+37jyZ+nL0z/kpr5s0rybxdEukbHAMqnW9JLxGa4/O5xf7mZRuvvgytVDTXfDj26Z XsosNuVXJWfui0/6Hm+7z1raRyVNXZU9p+T37dj5UXdWy6ra/S4/sd5h5sf2Qo2n9xhXb286 1Xlmhkyt938RUf35RfNmsLrM//Sv7U/MQgslluKMREMt5qLiRABIbMVRggMAAA== Archived-At: Cc: "kitten@ietf.org" Subject: Re: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 08:13:22 -0000 QXNpZGUgZnJvbSB0aGUgc3R1ZmYgR3JlZyBicm91Z2h0IHVwLCB3aGljaCBhbGwgbG9va3MgcHJl dHR5IHN0cmFpZ2h0Zm9yd2FyZCB0byBhZGRyZXNzLCB0aGUgcmVzdCBsb29rcyBnb29kIHRvIG1l Lg0KDQpBIGNvdXBsZSBtaW5vciB0aGluZ3MsIHdoaWNoIG1heSBvciBtYXkgbm90IGJlIHdvcnRo IGRvaW5nIGFueXRoaW5nIGFib3V0Og0KDQpTZWN0aW9uIDg6IEkgdGhpbmsgb25lIGNhbiBhcmd1 ZSB0aGF0IHRoZSBmb3JtdWxhdGlvbiB1c2luZyB0aGUgZml4ZWQgSVYgYW5kIHJhbmRvbSBjb25m b3VuZGVyIGlzIG1hdGhlbWF0aWNhbGx5IGlkZW50aWNhbCB0byB1c2luZyBhIHJhbmRvbSBJVjsg aXTigJlzIGp1c3QgZXhwcmVzc2VkIGRpZmZlcmVudGx5LCBmb3IgaGlzdG9yaWNhbCByZWFzb25z LiAgVGhpcyBkb2N1bWVudCBwcm9iYWJseSB3b3VsZG7igJl0IGJlIHRoZSBwbGFjZSBmb3IgaXQs IGJ1dCBJIHdvbmRlciBpZiBhIGZvcm1hbCB3cml0ZS11cCBvZiBlcXVpdmFsZW50IChmdWxseSBj b21wYXRpYmxlKSBjcnlwdG9zeXN0ZW1zIHVzaW5nIGEgbW9yZSBzdGFuZGFyZCBhcHByb2FjaCAo cmFuZG9tIElWLCBubyBjb25mb3VuZGVyKSBhbmQgbGF5aW5nIG91dCB0aGUgYWx0ZXJuYXRlIGZv cm11bGF0aW9uIG9mIGFsbCB0aGUgbWVzc2FnZXMgKGUuZy4sIHdoYXQgZG8gdGhlIGNoZWNrc3Vt cyBjb3ZlciwgYW5kIGhvdyBkb2VzIHRoZSDigJxjaXBoZXIgc3RhdGXigJ0gZml0IGluIHRoZW4/ KSB3b3VsZCBiZSBhIHVzZWZ1bCB3YXkgdG8gc2F5LCDigJxZZXMsIHNlZSByaWdodCBoZXJlLCB0 aGVzZSBLZXJiZXJvcyBjcnlwdG9zeXN0ZW1zIHJlYWxseSBkbyBjb25mb3JtIHRvIHRoZXNlIHNw ZWNzOyB0aGUgaGlzdG9yaWNhbCBmb3JtdWxhdGlvbiBpcyBqdXN0IHdlaXJkLuKAnSAgSW4gZmFj dCwgcGVyaGFwcyB3ZSBzaG91bGQgaGF2ZSByZXdvcmtlZCB0aGVtIGZvciBSRkMgMzk2MS4NCg0K QnV0IEkgZGlncmVzc+KApiBmb3IgdGhpcyBkcmFmdCwgd2hhdOKAmXMgdGhlcmUgaXMgZ29vZCwg dGhvdWdoIEkgd29uZGVyIGlmIGl04oCZcyBzdHJhaWdodGZvcndhcmQgZW5vdWdoIHRvIHJlYXNz dXJlIGEgcmVhZGVyIG5vdCBzdWZmaWNpZW50bHkgZmFtaWxpYXIgd2l0aCBjcnlwdG9ncmFwaHks IG9yIGlmIHRoZXnigJlsbCBqdXN0IHNlZSDigJxkb2VzIG5vdOKApmNvbXBseeKAnSB3aXRoIE5J U1QgcmVxdWlyZW1lbnRzLiAgR3JhbnRlZCwgbW9zdCBwZW9wbGUgcmVhZGluZyBpdCB3aWxsIHBy b2JhYmx5IGZpZ3VyZSBpdCBvdXQsIGlmIHRoZXkgY2FyZSwgYnV0IG91ciBhdWRpZW5jZSBpc27i gJl0IGV4Y2x1c2l2ZWx5IGNyeXB0b2dyYXBoZXJzLCBpdOKAmXMgcGVvcGxlIHdhbnRpbmcgdG8g dW5kZXJzdGFuZCBhbmQvb3IgaW1wbGVtZW50IHByb3RvY29scy4NCg0KU2VjdGlvbiA4LjE6IEl0 4oCZZCBiZSBlYXN5IGVub3VnaCB0byBkZWZpbmUgYW4gZW5jb2RpbmcgdG8gY2FycnkgMTI4IHJh bmRvbSBiaXRzIHdoaWxlIGJlaW5nIGNvbXBhdGlibGUgd2l0aCBVVEYtODsgSSBkb27igJl0IHRo aW5rIGl04oCZcyByZXF1aXJlZCB0aGF0IHRoZSAxMjggcmFuZG9tIGJpdHMgYmUgY29udGlndW91 cywgaXMgaXQ/ICBJdOKAmXMgZ29vZCB0byBub3RlIHRoZSBpc3N1ZSwgYnV0IHRoaXMgaXMgb25l IHdpdGggYW4gZWFzeSBzb2x1dGlvbi4NCg0K4oCcU29tZSBrbm93biBpc3N1ZXPigKbigJ0gaXMg Zm9sbG93ZWQgYnkgYSBsaXN0IG9mIG9uZSBwcm90b2NvbC1yZWxhdGVkIGl0ZW0uICAoSSB3b3Vs ZCByZWFkIOKAnEZ1cnRoZXLigKYgdGhlIGZvbGxvd2luZyBpc3N1ZXPigKbigJ0gYXMgaW50cm9k dWNpbmcgYSBzZWNvbmQgbGlzdCwgb2YgaW1wbGVtZW50YXRpb24gaXNzdWVzLCBub3QgYSBjb250 aW51YXRpb24gb2YgdGhlIGZpcnN0IGxpc3QuKSAgQSBsaXN0LW9mLW9uZSByZWFkcyBhd2t3YXJk bHk7IEnigJlkIHN1Z2dlc3QgcGVyaGFwcyBzb21ldGhpbmcgbGlrZToNCg0KICDigKYgc2hhbGwg YmUgcmFuZG9tbHkgZ2VuZXJhdGVkLiAgVGhlIHN0cmluZy10by1rZXkgZnVuY3Rpb27igKZ2YWxp ZCBVVEYtOCBzdHJpbmdzLCBzbyBhIFVURi04IGNvbXBhdGlibGUgZW5jb2Rpbmcgd291bGQgYmUg bmVlZGVkIHRvIGVuY2Fwc3VsYXRlIHRoZSAxMjgrIHJhbmRvbSBiaXRzLiAgSG93ZXZlciwgdXNp bmcgYSBzYWx0IGNvbnRhaW5pbmcgYSByYW5kb20gcG9ydGlvbiBtYXkgaGF2ZeKApg0KDQpLZW4= From nobody Tue Jan 19 10:44:23 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E67C1B3444 for ; Tue, 19 Jan 2016 10:44:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.366 X-Spam-Level: X-Spam-Status: No, score=-2.366 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6i3ylVPnb0eR for ; Tue, 19 Jan 2016 10:44:20 -0800 (PST) Received: from homiemail-a103.g.dreamhost.com (sub4.mail.dreamhost.com [69.163.253.135]) by ietfa.amsl.com (Postfix) with ESMTP id BC5CD1B3443 for ; Tue, 19 Jan 2016 10:44:20 -0800 (PST) Received: from homiemail-a103.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a103.g.dreamhost.com (Postfix) with ESMTP id 597F82005E634; Tue, 19 Jan 2016 10:44:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h=date :from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=cryptonector.com; bh=4orpJWVwGBqDm1 pWEa+BPqruF64=; b=LQahJzUWJJ4zqfi10jVUjXN+BHHJmaxr8E5zx1xY0wRVuP 1OiUo3dUg8o+9MuAcoIoHEUFyQmldmF9lqBpmLBAV0bAF0VMy8S7KYgPPo9sL8Qi YgfL3ZaFI8luqiPuWqu72SDub6CYNOZxA786iplXvntaOYiZTSbS1Tb5LIUDc= Received: from localhost (108-207-244-100.lightspeed.austtx.sbcglobal.net [108.207.244.100]) (Authenticated sender: nico@cryptonector.com) by homiemail-a103.g.dreamhost.com (Postfix) with ESMTPA id DA4822005E63C; Tue, 19 Jan 2016 10:44:07 -0800 (PST) Date: Tue, 19 Jan 2016 12:44:01 -0600 From: Nico Williams To: Greg Hudson Message-ID: <20160119184400.GB26294@localhost> References: <56992BA6.7040309@mit.edu> <20160119012415.GY6027@localhost> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20160119012415.GY6027@localhost> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: Cc: kitten@ietf.org Subject: Re: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 18:44:22 -0000 On Mon, Jan 18, 2016 at 07:24:16PM -0600, Nico Williams wrote: > On Fri, Jan 15, 2016 at 12:25:58PM -0500, Greg Hudson wrote: > > I did another read-through of the draft. I found some minor issues, > > which I hope can be resolved without requiring another WGLC. > > I did as well. I don't have anything substantial to add to your > comments: One more comment: - Perhaps we should REQUIRE that GSS Kerberos mechanism implementations implement and use the RFC6542 channel binding hash agility extension when using the new enctypes. This means we can stop using MD5 in the GSS mechanism when using the new enctypes. This is probably way too late now, and arguably that should be stated in a separate RFC, but it'd be a trivial one to publish and get to publish at the same time as the new enctypes. Nico -- From nobody Mon Jan 25 07:45:53 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 637671B2C62 for ; Mon, 25 Jan 2016 07:45:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.002 X-Spam-Level: X-Spam-Status: No, score=-0.002 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jDO7mjyjXoIw for ; Mon, 25 Jan 2016 07:45:50 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0713.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::713]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CC201B2C68 for ; Mon, 25 Jan 2016 07:45:49 -0800 (PST) Received: from CY1PR0101CA0002.prod.exchangelabs.com (10.162.170.12) by BY1PR01MB1386.prod.exchangelabs.com (10.162.211.148) with Microsoft SMTP Server (TLS) id 15.1.390.13; Mon, 25 Jan 2016 15:45:29 +0000 Received: from BL2FFO11FD020.protection.gbl (2a01:111:f400:7c09::108) by CY1PR0101CA0002.outlook.office365.com (2a01:111:e400:51d0::12) with Microsoft SMTP Server (TLS) id 15.1.390.13 via Frontend Transport; Mon, 25 Jan 2016 15:45:30 +0000 Authentication-Results: spf=pass (sender IP is 164.107.81.208) smtp.mailfrom=osu.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=osu.edu; Received-SPF: Pass (protection.outlook.com: domain of osu.edu designates 164.107.81.208 as permitted sender) receiver=protection.outlook.com; client-ip=164.107.81.208; helo=cio-krc-pf01.osuad.osu.edu; Received: from cio-krc-pf01.osuad.osu.edu (164.107.81.208) by BL2FFO11FD020.mail.protection.outlook.com (10.173.161.38) with Microsoft SMTP Server (TLS) id 15.1.355.15 via Frontend Transport; Mon, 25 Jan 2016 15:45:29 +0000 Received: from CIO-TNC-HT05.osuad.osu.edu (localhost [127.0.0.1]) (using TLSv1.2 with cipher AES256-SHA256 (256/256 bits)) (No client certificate requested) by cio-krc-pf01.osuad.osu.edu (Postfix) with ESMTPS id 5F574A006C for ; Mon, 25 Jan 2016 10:45:28 -0500 (EST) Received: from CIO-TNC-D2MBX02.osuad.osu.edu ([fe80::3960:dd86:ba2:ad26]) by CIO-TNC-HT05.osuad.osu.edu ([fe80::d0be:603:484c:5a2f%10]) with mapi id 14.03.0248.002; Mon, 25 Jan 2016 10:45:28 -0500 From: "Cantor, Scott" To: "kitten@ietf.org" Thread-Topic: Moving saml-ec to WGLC? Thread-Index: AdFXhyPyyT5hVhhGSM6HXubCUYQajA== Date: Mon, 25 Jan 2016 15:45:27 +0000 Message-ID: <9846A6064BD102419D06814DD0D78DE1127FBAB9@CIO-TNC-D2MBX02.osuad.osu.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [128.146.94.148] x-header-sapphire: true Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected X-EOPAttributedMessage: 0 X-Microsoft-Exchange-Diagnostics: 1; BL2FFO11FD020; 1:tO/T7oG3CsEVZspqn+ZAGfMrrKnp9gHZq3r7KQ0RogfpptVDUsSfZH5rn6JfzwUZFs36BndfiT1sxD0ErHLcMz2x394ZWRWilV3hI4w/9HbbjTRKHpYfeKZOqLQHYtkh+EI6snl/9SvwUc05YNQq9WWnKyvWOPt6c3cWFrdvklI7ukOYcXn8+aPFHwwzr52R4HEVT00+0wJwfg3XW+pW+8PNz905wooHKrEBW+dkjbkHeXmyfUb2y/SDT5y7U39sutbkVYsD14skWENRK2V/9enC5OBUvSFs54uqIE2V7DZ7zDf93UEX65/ag8dKW0WVl7kwdLAmX7G+IBYU+wWsfZtJcvAwN9w2uWvFejVuu2BSnsDhrg+FmocK/mqnj2K5Kdz6xGIACeXrlqVwU7Uhtq721obW9Cm1WaqSdWtQPz0= X-Forefront-Antispam-Report: CIP:164.107.81.208; CTRY:US; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(3000300001)(438002)(189002)(199003)(90282001)(55846006)(16796002)(50466002)(87936001)(1730700002)(97756001)(2906002)(75432002)(92566002)(86362001)(450100001)(88552002)(5250100002)(5004730100002)(46406003)(2501003)(23726003)(102836003)(110136002)(1220700001)(1096002)(2351001)(11100500001)(6806005)(2900100001)(229853001)(107886002)(2920100001)(2930100002)(54356999)(3846002)(106466001)(109096001)(89122001)(6116002)(33656002)(93346002)(189998001)(47776003)(66066001)(50986999)(586003)(5003600100002)(5008740100001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR01MB1386; H:cio-krc-pf01.osuad.osu.edu; FPR:; SPF:Pass; PTR:cio-krc-pf01.osuad.osu.edu; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1386; 2:oNBwiSg9bc2xYP93JL0725ClE282eA6uRBTfm2BeFkzf8ChwkjFr7aQ6te6cdbUEPAwYzc8CgOxCDtTAxVAfXGWFSwUOe6OryDtAqwNBdOSRq12MYoJaeof8xqncKB09fP0JRhoaE2mLo+LkZ9l9Pg==; 3:ZcLpKP0p/7HUarZrfPw0tumJTcIKOfraPGRGWBEpzTynHp6qAQtlNT41KqPxpadg1iqTMrwfeGtuEbBTRvzj9SO4dFwxrHHrq+TcVoOnqpZKSR4zUE72sTmfwqXTgrZFnWeUhhXPlIFSKKDEK8pwghGFWNWimnsAeChUb4WbP+1lPPSYyYm9VzPrI8s7ej2ZW7JWpnx1nHsj97JVO1dJVobrPPz7bH+5onS/Ltnz6iiqTNLybKyeUzyJWfJq8wy1VsAxrt4KqjOAZDgb/ML39A==; 25:2IVEgjr1+vX977ICBaIRqRN4HLjxhe6Z5hHMGo69coTqVsl1r/hduMSZQNPB5iunppKbAjJYKagbnl+RKpU98zvwn9cn2377GU4r8cbrLL2bMEQOkmIEicuuuFAw6rKbG+KrKg6pFg11JhWe5QmiRQ4B2gRAScLo9MR4ZXijqJLvPKU7gybbdHb4pXSy+Uqplk2A5rPCUWTXSdJKwWUzweJ2dObwWpfAvGYl3EDo1aYlwYtBkKmWxxxPVxN67/g+ X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(8251501001); SRVR:BY1PR01MB1386; X-MS-Office365-Filtering-Correlation-Id: 0dbb1442-792b-414f-4d35-08d3259e8d2d X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1386; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(123027)(2401047)(5005006)(13024025)(13018025)(520078)(13023025)(13017025)(8121501046)(13015025)(10201501046)(3002001); SRVR:BY1PR01MB1386; BCL:0; PCL:0; RULEID:; SRVR:BY1PR01MB1386; X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1386; 4:/SmJfzWcom2wNsyoJczFaZacuHw5/QPMASQ3rXybFV7H5mawN5HA3Ht6SW3aA85dZILOzuYYzcv64/guXyT1e8YG9DGIcIy7uSTdcNI8s9aBHVkE1+UfnkxNBwTGcuQ/jvo9b4+07Vgw75/QNiJn/B8Skc5DRoIc8OtwM8/PmodmYE8g3G1VKpwXL69cJTL1KhEeEcGRJbxKB2tlKsCKQQHXaxf95RusofhvnT9nrE14hzqlC6SsujtyS60QxQaaRhA08iVMf7SgKNnM6e60lpo12oA6qTLIHfUry9tCM+Ic/AMK6Hqu1dGLAp2eA8R1oAkt6eFwMBHxxD2Fplz5XVdnaxz5lcEr6OSWvPYpRKfSElUy4GTsaGon076sxAw14gg4rJ+515jDxCR0Pi64QWcwD4IWuCnjuBkdW3eIkT7chlyQ1aKFHRtF6NxLZ6FqH3WVFTjHSTOsv6UAsEKfZCd7nec3LmLdRfYALKxT/uQ= X-Forefront-PRVS: 083289FD26 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BY1PR01MB1386; 23:lxPDtbg9kgIjN5vbBT2QKI9MJQtGBQ15puK+H1C8U?= =?us-ascii?Q?L59SHojFOU9nTa/o3L0g5m2eYaAdFhcauIvNDLg/qvSiIS6SlctVQ85PcRfN?= =?us-ascii?Q?KurgA86IMqmqY+GXEpYbZLaAPcY1yn39np23n9gLcOh/R7nZIERucbseC405?= =?us-ascii?Q?MIbDZIK/tnE3UXwZWqk2fNhLwbgrcigwYec/zAaEGbYFM2hWUFveLaTrNthc?= =?us-ascii?Q?keyLy+sSCc5f/E5Ucj8iydzSggV7Df4cc3cDpx2z4IsaDM77+KuRVx+yxlde?= =?us-ascii?Q?juARLv0ul6Zv8PKaLk3TnLB6M/4kHvFOyY2chKrXHzpJ64dXt/AUl7wDwJQf?= =?us-ascii?Q?eZxQyQmzLC8AS4f/8+Qnh0T6ARQbam71wFFOpSy/9l4NzL5sTuef60Si4DDn?= =?us-ascii?Q?ymLVUjAwzIXAxw84RZ+7sg3/iTVYZdqkrGrGXtm9mMsmv+G/sJz90w+OkzoT?= =?us-ascii?Q?rw33g3cU8M0LdufJsmHYvK8Ta5Qph6aO7GdjKzStzqj/naD/aT+DNeHAQrkO?= =?us-ascii?Q?FCoRtsZpXbSRebCEjuoYK9Ioy+imdvsp0it0ReSly9RPT6YraXuRmcMrjSkW?= =?us-ascii?Q?KU+PpLjuUY8nCUz1xyQ4pke80hdQl80oXClj7FbX5xMdSamfFiKZcTmqUZT5?= =?us-ascii?Q?eBrS3tFs7zlvfrCsBVxeRaW1mI+HgdhSTgKx1lkUMjWY64R0RmO9JVwL9W9f?= =?us-ascii?Q?PVbp3+gl4i2dSBwIOmTPPt8umj1gPSNh+do7oV0i8DWktYqzy27lk7qkM3q+?= =?us-ascii?Q?zGBMZPCR31aT4vMli/KzDCg7d1TwPh43vRhpCjY/dVl5D1CNe7ZjEMf6qFWm?= =?us-ascii?Q?0wfGn1EkwWvbPVurBPoyFXiNZ7HIoSz0T0JM+i8BvEDaqLk3AsQJcWGojkSw?= =?us-ascii?Q?CuWMRIKoyQ2rSfHr52wt2ihMseJki/zRPF5cOI7dk7PLjgZeN0G+hlMAww9Z?= =?us-ascii?Q?22nLq2SF1Art3FH8dpfeiCWmQd/+ljZ7XgW/aG5ujx34WJuFEibUHmftuTIB?= =?us-ascii?Q?Wm34Kp9MHXpfEQeaU+kkt4fg8bdtaCZ5vaI8sbEYfpH0pD78Fdm/3T30fbuj?= =?us-ascii?Q?AbKo0iAceBcVJWGoNImF3i1Skgz1WQARv9E+yVqHuWI10UTi7wyAIur32Hhg?= =?us-ascii?Q?HAXWmboZrcFp4VwTLdPOJZh4mxjC/pIb/Pu6dkpeFxQPbEaHh6NQ62nuNN2Z?= =?us-ascii?Q?T5gSm/+CndeqQAjNUs9HrSiP7/CjdsQ7wb0N3y2ce8sjjr4sKnnQKC5y0qsi?= =?us-ascii?Q?U6XKamKVPhrbgcpoCL5R9uLYNdTce//3swFBC3A?= X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1386; 5:NQQKtlF56yi8CY0indwMugCdk2NvBz4lQm1AoyOxhIPiO5c+qeF+byIvPDjrbH8YhKd+AAWlitQKN8IOsu4/Ag9WscIawpcBUHoFv2s/SoHjyhxtKCwgjpqFj34BAV8CrPYxxxjv7pYLf3GZqlkv7w==; 24:Kv3WrdgTqYoubVlTL6XUMNp9bbIRYKUE07IH4fbh6eRu67XQUBFFfa2l83h1+ASfr9TtcXyYe8PpXJ3YRnr4NihkMUXS9CU7gmVrlP8M9LQ=; 20:X9ucV2fQKT2m5tSr+GHqrnfpH4yGdxYSA3mg3wjsQjuSFWNjeaoyZ1veJnpzWRXhMaa4ySnKhCArUQ2E6XKPN+sxH3UwWz3IAqGOxopXT5brNceejeyHjbml1LoNq/GDHcirqYhmYEdIbeBy4T7NOoPiSa6tbOQO0W0pRB5PX1c= SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: osu.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jan 2016 15:45:29.1896 (UTC) X-MS-Exchange-CrossTenant-Id: eb095636-1052-4895-952b-1ff9df1d1121 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=eb095636-1052-4895-952b-1ff9df1d1121; Ip=[164.107.81.208]; Helo=[cio-krc-pf01.osuad.osu.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR01MB1386 Archived-At: Subject: [kitten] Moving saml-ec to WGLC? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jan 2016 15:45:52 -0000 I've been neglectful, but keep meaning to ask about moving the saml-ec draf= t forward. I'm not aware of any outstanding comments or issues with it, and= there's been some ongoing work supposedly happening to finish up the one i= mplementation of the client and server parts of this, so what needs to happ= en to move this along? -- Scott From nobody Mon Jan 25 16:28:38 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 493CE1AC3B0 for ; Mon, 25 Jan 2016 16:28:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v1jOGCrNcDBL for ; Mon, 25 Jan 2016 16:28:35 -0800 (PST) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 723221AC3AF for ; Mon, 25 Jan 2016 16:28:33 -0800 (PST) X-AuditID: 12074424-f79216d00000156e-aa-56a6bdafca90 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id AC.A2.05486.FADB6A65; Mon, 25 Jan 2016 19:28:31 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id u0Q0SUCg030847; Mon, 25 Jan 2016 19:28:31 -0500 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u0Q0SRIa000729 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 25 Jan 2016 19:28:30 -0500 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id u0Q0SR1k006253; Mon, 25 Jan 2016 19:28:27 -0500 (EST) Date: Mon, 25 Jan 2016 19:28:27 -0500 (EST) From: Benjamin Kaduk To: "Cantor, Scott" In-Reply-To: <9846A6064BD102419D06814DD0D78DE1127FBAB9@CIO-TNC-D2MBX02.osuad.osu.edu> Message-ID: References: <9846A6064BD102419D06814DD0D78DE1127FBAB9@CIO-TNC-D2MBX02.osuad.osu.edu> User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrGIsWRmVeSWpSXmKPExsUixCmqrbt+77Iwg+WvJCxajohbHN28isWB yWPJkp9MHs1Xl7MHMEVx2aSk5mSWpRbp2yVwZTzZI1xwm7Viwq8mxgbGIyxdjJwcEgImEkv2 7WWHsMUkLtxbz9bFyMUhJLCYSWLi/gvsEM5GRolJd1dBZQ4xSbxquQzWIiTQwChx/C/YKBYB bYnl25cxg9hsAioSDd2XwWwRATWJ1QvegtnMAuoS3868Yexi5OAQFtCVWHXBHCTMKRAq0fRs O9hIXgFHicm/HzBDjA+R+La2lw3EFhXQkVi9fwoLRI2gxMmZT1ggRmpJLJ++jWUCo+AsJKlZ SFILGJlWMcqm5Fbp5iZm5hSnJusWJyfm5aUW6Zrr5WaW6KWmlG5iBAUpu4vKDsbmQ0qHGAU4 GJV4eDcULAsTYk0sK67MPcQoycGkJMqbsBgoxJeUn1KZkVicEV9UmpNafIhRgoNZSYQ3YQNQ jjclsbIqtSgfJiXNwaIkzrurY26YkEB6YklqdmpqQWoRTFaGg0NJgld+D1CjYFFqempFWmZO CUKaiYMTZDgP0PBgkBre4oLE3OLMdIj8KUZdjgU/bq9lEmLJy89LlRLn3bcbqEgApCijNA9u Dji57GZSfcUoDvSWMG8XyCgeYGKCm/QKaAkT0JK/motBlpQkIqSkGhhzWcQ6HO/qfum9/+zO 95s1swRUzQS2xserdaco+x5l/LOj1t7g1cbqeY81/UvX9BevFmfvtjKZ2Dhz+/dN2vsXr7rE sXn2rMXn01LzNgUEbH+4VM1e1mh/6H8uAVHVT8kty642rj+1f8siP4PfOi9b+MwmvHcX3vzg xF396TvndXOVcjV4uh1VYinOSDTUYi4qTgQA8HZx9QkDAAA= Archived-At: Cc: "kitten@ietf.org" Subject: Re: [kitten] Moving saml-ec to WGLC? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2016 00:28:37 -0000 On Mon, 25 Jan 2016, Cantor, Scott wrote: > I've been neglectful, but keep meaning to ask about moving the saml-ec > draft forward. I'm not aware of any outstanding comments or issues with > it, and there's been some ongoing work supposedly happening to finish up > the one implementation of the client and server parts of this, so what > needs to happen to move this along? Given that the revision we had previous been waiting for occurred (thank you!), author request suffices to move this into the WGLC queue. (Everyone is of course welcome to provide review before the WGLC period begins.) I think there are a couple of things we would want to run the WGLC for first, but I've added this to the list. -Ben From nobody Mon Jan 25 16:32:20 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61F721AC3BA for ; Mon, 25 Jan 2016 16:32:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MIQ_t4fhu3Ki for ; Mon, 25 Jan 2016 16:32:16 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0704.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::704]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B42781AC3B9 for ; Mon, 25 Jan 2016 16:32:15 -0800 (PST) Received: from BLUPR01CA033.prod.exchangelabs.com (10.160.23.23) by BY1PR01MB1401.prod.exchangelabs.com (10.162.211.150) with Microsoft SMTP Server (TLS) id 15.1.390.13; Tue, 26 Jan 2016 00:31:57 +0000 Received: from BL2FFO11OLC016.protection.gbl (2a01:111:f400:7c09::132) by BLUPR01CA033.outlook.office365.com (2a01:111:e400:8a4::23) with Microsoft SMTP Server (TLS) id 15.1.390.13 via Frontend Transport; Tue, 26 Jan 2016 00:31:57 +0000 Authentication-Results: spf=pass (sender IP is 164.107.81.216) smtp.mailfrom=osu.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=osu.edu; Received-SPF: Pass (protection.outlook.com: domain of osu.edu designates 164.107.81.216 as permitted sender) receiver=protection.outlook.com; client-ip=164.107.81.216; helo=cio-tnc-pf02.osuad.osu.edu; Received: from cio-tnc-pf02.osuad.osu.edu (164.107.81.216) by BL2FFO11OLC016.mail.protection.outlook.com (10.173.160.82) with Microsoft SMTP Server (TLS) id 15.1.355.15 via Frontend Transport; Tue, 26 Jan 2016 00:31:56 +0000 Received: from CIO-KRC-HT02.osuad.osu.edu (localhost [127.0.0.1]) (using TLSv1.2 with cipher AES256-SHA256 (256/256 bits)) (No client certificate requested) by cio-tnc-pf02.osuad.osu.edu (Postfix) with ESMTPS id F040E2005B; Mon, 25 Jan 2016 19:31:55 -0500 (EST) Received: from CIO-TNC-D2MBX02.osuad.osu.edu ([fe80::3960:dd86:ba2:ad26]) by CIO-KRC-HT02.osuad.osu.edu ([fe80::8554:1787:2a7:72c9%12]) with mapi id 14.03.0248.002; Mon, 25 Jan 2016 19:31:55 -0500 From: "Cantor, Scott" To: Benjamin Kaduk Thread-Topic: [kitten] Moving saml-ec to WGLC? Thread-Index: AdFXhyPyyT5hVhhGSM6HXubCUYQajAAcz4qA//+tQIA= Date: Tue, 26 Jan 2016 00:31:54 +0000 Message-ID: References: <9846A6064BD102419D06814DD0D78DE1127FBAB9@CIO-TNC-D2MBX02.osuad.osu.edu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [128.146.14.66] x-header-sapphire: true Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-EOPAttributedMessage: 0 X-Microsoft-Exchange-Diagnostics: 1; BL2FFO11OLC016; 1:fpkqIj7PoKIaW+8gYKbZARGCDm0TZhjq6czKg7stXiJior5934JK/6cntPNKtvOqlSSAbtv8pM2xKtCiPCjMf1tDRRBhdH1203ThaXZcMmrujTtfz7WA7kQnarlow6ZFw4nZdbyiv4jxf1XGEzo8QDQqmHzVuKn5v19ZlJBAjPsawIJVYlrKBBOx6pCop+L0fOO06jCyqHDjILhDcdDVLA7ebLfMs4YhGzSOc9wSn/RzlwX3dehvEsCrJkwUiXEy9KsI63ojoFgDx3BY6xmQNbPMIpnAHbx5zRgBnKS/aNpKQbHF3+ZqkVH2ihsST3jJzznM4G+AIZR2RSGzPljU/ImIieS+Ou4F4xjAaS27DLguBxauCTl5Yw+RIoWVQIujyqpmiVV/wQ/14btJe9635w1mB7X8Oh5OLfAgCCFnBg000yY4HN+OvYNHpOaMdIycqRaCwhBwcqL+ZmlbTzJp8YSFQ9McS36w1QbpUxnrurE= X-Forefront-Antispam-Report: CIP:164.107.81.216; CTRY:US; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(3000300001)(438002)(479174004)(24454002)(377454003)(199003)(189002)(86362001)(110136002)(23676002)(102836003)(82746002)(586003)(3846002)(6116002)(54356999)(5250100002)(11100500001)(76176999)(50986999)(1096002)(19580405001)(1220700001)(2900100001)(19580395003)(2950100001)(92566002)(5004730100002)(88552002)(4326007)(75432002)(2906002)(189998001)(33656002)(87936001)(89122001)(558084003)(109096001)(93346002)(2171001)(36756003)(90282001)(47776003)(5003600100002)(83716003)(66066001)(5008740100001)(50466002)(16796002)(6806005)(106466001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR01MB1401; H:cio-tnc-pf02.osuad.osu.edu; FPR:; SPF:Pass; PTR:cio-tnc-pf02.osuad.osu.edu; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1401; 2:YSiitowOdHc45VW99W6W14GTEbaIgsCj/A6wowlf2FhNY9Fb4B7YtK07n0iv3lPJMbJd2pPDZBszqJWLidpyOw+NvG/CmNRF3/3VWGYsAdQpNaxAWL5fW2Kmf6iEjuLS1tVJuYC0Xq1wJW3Fcgtbxg==; 3:6wI1e/ZVvpJMgeZFjZOyv53RmyrKXJLlWV9jOMefvJQyZamVEt3TJmwS+O/d5Yw7Qq32p1Gqudb+Pidt9Yv3TfWe5rJZn8Cnnd5261cEkQ0CQtssLTemxGW3g7C1DD8VN6ci+pR7AmGVUhA2zJUOvc4kRAd1nnQjekAyXadANXreUEydzl4uDpYo5mctuaAy6TS+dgtFA64nybWnEoA0kmEsdz7QP7EMvAbqtEc8b13ZFajsbqVGvSwwogkM6/PaW4KB5MJZuxIUw7SCaPSjVA==; 25:iqLLUGlJp5yPJKv2aWARzoiMWzf+/UFCHBO+9P96W5x2IlDOlYFQ5yChpKW3xCP6nojJ4s1dY9b8bnaqW133OPji7DeRSSziyQJaR2OUjHrXC+yv6NDz6mb1sVg0/jHYpLOYX/6QjRwAoh1CvOGfW8fqK6XLbBqncz2nl4UTRWR70zx/kThRzs+R3BsZvEe1WqJ0h19uwnhxNlM1NRqNPhmMFaF/XO499oaBpbwmeRB+HZF2JyeUaRiRN/w2kDtK X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(8251501001); SRVR:BY1PR01MB1401; X-MS-Office365-Filtering-Correlation-Id: e16442a4-a713-44ac-962f-08d325e818e7 X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1401; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(123027)(2401047)(13017025)(8121501046)(13023025)(13015025)(5005006)(13024025)(520078)(13018025)(3002001)(10201501046); SRVR:BY1PR01MB1401; BCL:0; PCL:0; RULEID:; SRVR:BY1PR01MB1401; X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1401; 4:nU/qsQOV4tRp82Op7LDaSOHtyBhKbJC3AqBVwfaId2F1gqSbw3ilqSrKbj2W7n0G0frQcm0H45mjqAIuCtKRuozcZvVWz4NF/GkVh0BjEs2qLo8cYkTMn/ufU76kukX2OAKmgwkLS7YRLJmRAxY3omju7ynmU128sj8lcpmnDWfLITJC1e5V91wlquCnfG8g8iTsCePljxXlDU4Zm8yc7lqQWn0B8t0wAodI8RU8GVyl4D4F/FHI9lwih5xHt2murSdw0eYNRvT2yQxGTfRqHwyUl7A+5zNynHimRDUBmDKW+12mgmkNJ98w91SE07L8uv+fMdJCMzlGq6x3tRbUmD0yoKJpAgketzddMZ3lALOq06sKlZPLbAvW33Dc43qjXZHkBB1cb4dsQVIrfknQQInyWLz/d+3TBhzAEUKCBr6OyZ9tutC7uap+8zrNFbCgaJzaityt3BXdYKpABqAaQqeF6dZGAn8BESrlU4Kt2ME= X-Forefront-PRVS: 08331F819E X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtCWTFQUjAxTUIxNDAxOzIzOjEwQ0dHbVB6Z2ZVM1c4Z1ZDYnpZNjhJRDVU?= =?utf-8?B?ckE2SXNMYzJHdVFscUxUVUZnckhMUVZmYVR6TU5ZV0tqK2JKS2ovY3l0MERG?= =?utf-8?B?Y1F2S01OTjFIK2NMTElzeWxUZy9hWk8ybmcvWENTZGxMSDIvSjdwRTZNMmc5?= =?utf-8?B?NHhuaExsNEJQWDllWVNnQkE5Sk82VGFHak9ETE1uaXVpQkVoMG54NDhuRFhF?= =?utf-8?B?Z2YvaWs2Uk0wYW1JTHVEaXFJajYwS2dWUzBEK2diMVhwc1pXeG4rUWVmVFo3?= =?utf-8?B?a0g0SkhpRG1IeHJJQ21MVzlmWXhlWFZ2byt0cnpTRUwzNUVrcHI3SWt3SlIx?= =?utf-8?B?djJIU3g2aG9nSEVoOHZROHpUbnBabFNWbGFqSHFaT1I2d21VbktiU3h6Zjcx?= =?utf-8?B?MDJsSnJuNHo5Vks0NlZjN2pGVGZiWHJaQnExY0dEM0RwSjRsWHQvK3cwT2F1?= =?utf-8?B?eDNSZWdFd2dqNjRjaldVaWlSTG5BMzVVemRBaUJwUTdjVm9BWFdSeUdkU2Qw?= =?utf-8?B?a21Kb3hPczhpWlBjR2FwNXF4Tys5RW5IR2RVclBOT3RtVUJ2aVYwM3VXZldK?= =?utf-8?B?Y3hpUGI4ZHJhRTBJTWpPZnkxMklYSEVIUDNhTnhKcUsrOFRKWHpVUm1ESXhi?= =?utf-8?B?WVJZN3hjUDR2YVhpTjh6OEdvVFpqd1I5bW5sclVHSHg0MHJXc1NXREMvWnV3?= =?utf-8?B?S0FqUzM4TWFGWDV6SGpZNFYyUElnUlptVStwNGtVYTg5ek1MK2FaTEJ4SXcz?= =?utf-8?B?TU1vNmZSN1lKQVkzN0c5UXBHQk9idW5TcFJUY1hwVTBYUzFmWnEvdGpCOExG?= =?utf-8?B?Z3ZIMUk3ZWJsN2lPaHY1VkFZMnJHUXptL0RPTU9OM2xNMVVyRmNuTWpoSDgr?= =?utf-8?B?OWJiTnhxdU1kbjRCNXp2a1RLWjc4MVJnRXlJYnA3SUNLY3FkR3RuYWZxNlRS?= =?utf-8?B?WDlTWGtmakFxcnJTM0I1ejVVY0NkbXd3OWJ5WWU3SGd5MWdYeXF4WEorVWtF?= =?utf-8?B?T3lIejZadUZST1RQaVVOclJiNmtCSWcrWmxLVC85eWxPSmViMzhDREpXcWFo?= =?utf-8?B?eFdKNWFqQTQyZ1NlZm9zMm00UGhhRDc1dTdGTXVtWWh6NThQUXZwQkpONUUx?= =?utf-8?B?RjVkMlpNSkFTdW5UbkZncEZYNE9wRkZFN1p0Q3AzZEd1N21ONjdLdXhBd2RM?= =?utf-8?B?SmRQUmdhQUpFQ1hubzVGTXloNFBzalFGeUxGbnYzcFplbjFkd0JFL0MrVFRz?= =?utf-8?B?RnhNbVdKWGhmUmMzZ3BYSkszaFhlaU0wMVE3b0hIVGJ6em90NnluUjBCWGdp?= =?utf-8?B?R05wc3h0S2VFVjhGaWdDZVR2dVJXdmVWa0RCajRPbHhsZ09BZnVWSUMvTHcr?= =?utf-8?B?NVRkMDY3ZGY1M1NlWXNiQmdYaWdDRm14RWlVc0E5Q0UyUm5FTFM4Z0NPbzh3?= =?utf-8?B?d1oxREZkdUNTS3Vrc3gyTHZmTzBscWJNbXBlOUdubE5DVjdKeFhUVVcyNGdI?= =?utf-8?B?ajUzNXhYZU5UU2VLeE5xOEpTQkFKMVVMT0NNc1Qva0FqU04wM2pTY2kreUFC?= =?utf-8?B?VHpkMHhnWGdiblA3VTA2clkxNFRocEZFS1pXblRSTmU3Wnk4N1NJQklIdllD?= =?utf-8?B?Z3Q5bEZ5NVJzcG0vVGZuVTVCR29HYmpNcmxvUk9YSWZUTmpzaG1kM2EzcDFY?= =?utf-8?B?clRPbU1hdHEwL1kyMFdSdGNWZGhJdDZpZ0U0VzdMcUZyM0ErRWtFUDdDRFV1?= =?utf-8?B?dnRmVldQN0ZGSkRmL2tNbWFZWWdyOExoRWRGaVlYUmJways1SmkvVGg4OCt1?= =?utf-8?B?eHlQUzlqS3FLOTBKZlZhUXhXcmwrS0o3Z0p4cW1lUDJVN0E9PQ==?= X-Microsoft-Exchange-Diagnostics: 1; BY1PR01MB1401; 5:7aFKdw/e38EGGmSG+syuLhDF+EL7aKW+LiCRSXyRhaeQW3CwRztPuKHm3nwzTRJpzCj2SLVi9ZRFKEzw2ZocvXl5q+oH6GBYzXj/zCETMHX9eFtTzDnKzde/qRnhMl26gp6HF5rgD31uQw2WMzUalg==; 24:OJW4xteFoYzSm8anjvfUq77ckGIVnO5Fd8Jm8NMKzwHt7igNMPWeeSnGbNcxLHTrSUvQLj4tBvDQnBXm73e04hHk28e1kfuRkxyFb0UsZmw=; 20:A0tkGpbJv8SZM3C7nwCJBxA77h/Pj3eoXTDXkI+NCsSB3obxzWV5LWtQLwW/dUCsDCZvTRWx2PVn1Va/OzPwIFHLBWmuwc1g8q4BgL59i3y6MfVtRPDUi4zb0AQNFhKymSJEuCaX9gidKseGXlQzwd6s25SuNuy+XkVc5Wokgtg= SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: osu.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Jan 2016 00:31:56.8750 (UTC) X-MS-Exchange-CrossTenant-Id: eb095636-1052-4895-952b-1ff9df1d1121 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=eb095636-1052-4895-952b-1ff9df1d1121; Ip=[164.107.81.216]; Helo=[cio-tnc-pf02.osuad.osu.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR01MB1401 Archived-At: Cc: "kitten@ietf.org" Subject: Re: [kitten] Moving saml-ec to WGLC? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2016 00:32:19 -0000 T24gMS8yNS8xNiwgNzoyOCBQTSwgIkJlbmphbWluIEthZHVrIiA8a2FkdWtAbWl0LmVkdT4gd3Jv dGU6DQoNCg0KPg0KPkkgdGhpbmsgdGhlcmUgYXJlIGEgY291cGxlIG9mIHRoaW5ncyB3ZSB3b3Vs ZCB3YW50IHRvIHJ1biB0aGUgV0dMQyBmb3INCj5maXJzdCwgYnV0IEkndmUgYWRkZWQgdGhpcyB0 byB0aGUgbGlzdC4NCg0KR3JlYXQsIHRoYW5rcy4NCg0KLS0gU2NvdHQNCg0K From nobody Mon Jan 25 19:32:36 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1978A1B2D68 for ; Mon, 25 Jan 2016 19:32:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xHPSrIk1Kx7J for ; Mon, 25 Jan 2016 19:32:34 -0800 (PST) Received: from dmz-mailsec-scanner-2.mit.edu (dmz-mailsec-scanner-2.mit.edu [18.9.25.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE4221B2D65 for ; Mon, 25 Jan 2016 19:32:31 -0800 (PST) X-AuditID: 1209190d-f79306d000006b70-b7-56a6e8cedbfc Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-2.mit.edu (Symantec Messaging Gateway) with SMTP id 67.2C.27504.EC8E6A65; Mon, 25 Jan 2016 22:32:30 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id u0Q3WTpw017627 for ; Mon, 25 Jan 2016 22:32:30 -0500 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u0Q3WQsU021712 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Mon, 25 Jan 2016 22:32:29 -0500 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id u0Q3WQ9s029301; Mon, 25 Jan 2016 22:32:26 -0500 (EST) Date: Mon, 25 Jan 2016 22:32:26 -0500 (EST) From: Benjamin Kaduk To: kitten@ietf.org In-Reply-To: Message-ID: References: User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrGIsWRmVeSWpSXmKPExsUixCmqrXvuxbIwg38TBSyObl7F4sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujI+P6woO81a8PXSPqYGxlbuLkZNDQsBE4uGTzSwQtpjEhXvr 2boYuTiEBBYzSSzdNZkFwjnOKNF98xQrhHODSeLGoZNQTgOjxJPjN8D6WQS0JdZenMIIYrMJ qEjMfLORDcQWERCW2L31HTOILSxgLbFiyXomEJtTwEli/rN1QDUcHLwCjhJbbviChIWAzC+/ HoKNERXQkVi9fwrYeF4BQYmTM5+A2cwCWhLLp29jmcAoMAtJahaS1AJGplWMsim5Vbq5iZk5 xanJusXJiXl5qUW6Rnq5mSV6qSmlmxjBwSfJu4Px3UGlQ4wCHIxKPLwcxcvChFgTy4orcw8x SnIwKYnyJiwGCvEl5adUZiQWZ8QXleakFh9ilOBgVhLhLToElONNSaysSi3Kh0lJc7AoifPu 6pgbJiSQnliSmp2aWpBaBJOV4eBQkuCtfQ7UKFiUmp5akZaZU4KQZuLgBBnOAzR8AUgNb3FB Ym5xZjpE/hSjopQ473OQhABIIqM0D64XnBx2M6m+YhQHekWYVxSkigeYWOC6XwENZgIa/Fdz McjgkkSElFQD4+I5ug9nHSu72bhp9vW/y7vTJI/7rtu6TOZLXufH4MTDDm3LPzdan03q0J3e v8ZoWSf/Bdnzze5KpzU9Ty2zlbxdrX4kTiZ+/x3uGJMZ/u85K82b4ysWWCi3r303r4mZ/9nd K3caGZTMV3/UEjh68liHoYqwfH+X0oV+8Yldq7NlHJaltp+Yp8RSnJFoqMVcVJwIAGWWF07p AgAA Archived-At: Subject: Re: [kitten] WGLC on draft-ietf-kitten-aes-cts-hmac-sha2-08 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2016 03:32:36 -0000 Thanks to everyone who reviewed the document for this WGLC. There were no major issues raised, so the document will be able to be sent to the IESG once a new version is produced that fixes the minor issues that were raised. -Ben On Wed, 6 Jan 2016, Benjamin Kaduk wrote: > This message begins the third Working Group Last Call (WGLC) of "AES > Encryption with HMAC-SHA2 for Kerberos 5" > . Previous WGLCs were held for > versions 06 and 02 of this document. Review during the second WGLC raised > some issues that required changes to the content of the document, so > another WGLC is needed. The WGLC will last two weeks, ending on Wednesay, > January 20th. The draft is available at: > > https://tools.ietf.org/html/draft-ietf-kitten-aes-cts-hmac-sha2-08 > > A diff of the changes since the previous WGLC is available at: > > https://tools.ietf.org/rfcdiff?url2=draft-ietf-kitten-aes-cts-hmac-sha2-08.txt&url1=draft-ietf-kitten-aes-cts-hmac-sha2-06.txt > > Please review the document and send comments to the Working Group mailing > list kitten@ietf.org or the co-chairs kitten-chairs@ietf.org before the > end of the WGLC. Any and all comments on the document are sought in order > to access the strength of consensus. Even if you have read and commented > on this or earlier versions of the draft, please feel free to comment > again. This is particularly important if you found issues with the > previous version. > > As a reminder, comments can be anything from "this looks fine" to "this is > a horrible idea"; they can include suggestions for minor editorial > corrections to significant editorial changes. > > > - Your Kitten Chairs > From nobody Tue Jan 26 10:47:02 2016 Return-Path: X-Original-To: kitten@ietf.org Delivered-To: kitten@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E3831B2B6A; Tue, 26 Jan 2016 10:47:01 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.13.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160126184701.29564.15379.idtracker@ietfa.amsl.com> Date: Tue, 26 Jan 2016 10:47:01 -0800 Archived-At: Cc: kitten@ietf.org Subject: [kitten] I-D Action: draft-ietf-kitten-aes-cts-hmac-sha2-09.txt X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2016 18:47:01 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Common Authentication Technology Next Generation Working Group of the IETF. Title : AES Encryption with HMAC-SHA2 for Kerberos 5 Authors : Michael J. Jenkins Michael A. Peck Kelley W. Burgin Filename : draft-ietf-kitten-aes-cts-hmac-sha2-09.txt Pages : 17 Date : 2016-01-25 Abstract: This document specifies two encryption types and two corresponding checksum types for Kerberos 5. The new types use AES in CTS mode (CBC mode with ciphertext stealing) for confidentiality and HMAC with a SHA-2 hash for integrity. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-kitten-aes-cts-hmac-sha2/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-kitten-aes-cts-hmac-sha2-09 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-kitten-aes-cts-hmac-sha2-09 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jan 26 10:51:57 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D92DA1A90BB for ; Tue, 26 Jan 2016 10:51:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xAN7MKyy-5ec for ; Tue, 26 Jan 2016 10:51:56 -0800 (PST) Received: from mail-vk0-x22b.google.com (mail-vk0-x22b.google.com [IPv6:2607:f8b0:400c:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A85A01B2B87 for ; Tue, 26 Jan 2016 10:51:54 -0800 (PST) Received: by mail-vk0-x22b.google.com with SMTP id k1so97346556vkb.2 for ; Tue, 26 Jan 2016 10:51:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=1pZ5Qk92cznW+61WO1Hb0Db/WIURzM5uTQMwA1i2F/0=; b=OibruMjmpdPur/4L0mjfooN63ioJRhXEzvRVYNhMtrW8dje+vug3UsFP/6cT2o2GJa pqXEHP+xO6xn86aL8D/w2YOsvRowm1HfUVENxuLGnA+BLeRc8ZivHFkc0niAPbNSjAVY G//TKx3JKP7Icd4oN3ckcZphQtJT5hmDub61pia2LQL2rtcsR+frw51skuJRajHkZ4tI nINcKWrBtmFa0vF6UqVx02efrMQoL18xwYvyy65uEKCJ7Pjf7SX9hdhUI7SkJdV2jaKL PJqSxnB1AEidlZPaSdl7CPYxtnVH+uucbluMVDgtFjuN+0CbZac6FR/qNjQSuIBAQ2tB FTMg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=1pZ5Qk92cznW+61WO1Hb0Db/WIURzM5uTQMwA1i2F/0=; b=is8vhfMKGNCKcIEinmiqofeOXT+JYbSUj62AbTWtJx5cvxnWLjcDy/ybf6FFHLFr6V RQaZnH56+uM5zHXj8FcSdHVprCp3l7pz3GrgYKPvFNf7eyhAa5MC/cwOcCd+Hip9h78a Y0mUohfiYKMw8K7SOGHZUhHV+5csltcET28dRa/9EZ5TpnCjJBJ30VbWIvexCweTcQD8 R5FQ79+YW1ut27+CzaFi2LTQ5or46MRtO6Cl65k1kBxcBtf8m3VAjw0L0FlkZBrVoQuL 4spYyXaFglDBv42jKfmDSqZ9yBMK7yc41B/TMQyQlK6gX8++T3hverPYBs2UzLmrI7ZU WPiA== X-Gm-Message-State: AG10YORyH6h+dhnyAURN4iTj7V4Cj6K5DWFTXRxk54gmZbYh3f5EWoE6I1MaLFvuqTSrD58HIHhBfXiXj3G27Q== MIME-Version: 1.0 X-Received: by 10.31.14.149 with SMTP id 143mr15930873vko.3.1453834313769; Tue, 26 Jan 2016 10:51:53 -0800 (PST) Received: by 10.31.194.66 with HTTP; Tue, 26 Jan 2016 10:51:53 -0800 (PST) Date: Tue, 26 Jan 2016 13:51:53 -0500 Message-ID: From: Michael Jenkins To: kitten@ietf.org Content-Type: multipart/alternative; boundary=001a11457f30d5aa1f052a412d75 Archived-At: Subject: [kitten] new draft-ietf-kitten-aes-cts-hmac-sha2 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2016 18:51:57 -0000 --001a11457f30d5aa1f052a412d75 Content-Type: text/plain; charset=UTF-8 A new version of the subject draft has been posted. We addressed all of the comments on -08, generally with text supplied (thanks!). Mike -- Mike Jenkins mjjenki@tycho.ncsc.mil - if you want me to read it only at my desk m.jenkins.364706@gmail.com - to read everywhere 443-634-3951 --001a11457f30d5aa1f052a412d75 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
A new version of the subject draft has been posted. W= e addressed all of the comments on -08, generally with text supplied (thank= s!).

Mike

--
Mike Jenkins
mjjenki@tych= o.ncsc.mil - if you want me to read it only at my desk
m.jenkins.364706@g= mail.com - to read everywhere
443-634-3951
--001a11457f30d5aa1f052a412d75-- From nobody Tue Jan 26 10:55:02 2016 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5C371B2B7F for ; Tue, 26 Jan 2016 10:55:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vsswJ1dxemyt for ; Tue, 26 Jan 2016 10:54:59 -0800 (PST) Received: from dmz-mailsec-scanner-2.mit.edu (dmz-mailsec-scanner-2.mit.edu [18.9.25.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C64231B2B72 for ; Tue, 26 Jan 2016 10:54:57 -0800 (PST) X-AuditID: 1209190d-f79306d000006b70-7e-56a7c100dd84 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-2.mit.edu (Symantec Messaging Gateway) with SMTP id 67.E8.27504.001C7A65; Tue, 26 Jan 2016 13:54:56 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id u0QIstc5018604 for ; Tue, 26 Jan 2016 13:54:56 -0500 Received: from [18.101.8.205] (vpn-18-101-8-205.mit.edu [18.101.8.205]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u0QIssXe019203 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for ; Tue, 26 Jan 2016 13:54:55 -0500 To: kitten@ietf.org References: From: Greg Hudson Message-ID: <56A7C0FE.9080403@mit.edu> Date: Tue, 26 Jan 2016 13:54:54 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrLIsWRmVeSWpSXmKPExsUixCmqrMtwcHmYwaOv/BZHN69icWD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxu7236wFDcwVd36dZGxg3M7UxcjJISFgIvH7QS8bhC0mceHe eiCbi0NIYDGTxKKGN1DOcUaJ6XeXQjm3mCQOvTvODNIiLGAr8frATHYQW0RAWGL31ndgcSGB AImdJ46CxdkElCXW79/K0sXIwcEroCaxbpMViMkioCrxqQ/sCFGBCInDnV1g1bwCghInZz5h AbE5BQIlni78yghiMwvoSey4/osVwpaX2P52DvMERoFZSFpmISmbhaRsASPzKkbZlNwq3dzE zJzi1GTd4uTEvLzUIl0jvdzMEr3UlNJNjOCQlOTdwfjuoNIhRgEORiUe3hv7l4cJsSaWFVfm HmKU5GBSEuW1AgnxJeWnVGYkFmfEF5XmpBYfYpTgYFYS4f29HijHm5JYWZValA+TkuZgURLn 3dUxN0xIID2xJDU7NbUgtQgmK8PBoSTBmwQyVLAoNT21Ii0zpwQhzcTBCTKcB2j4RJAa3uKC xNzizHSI/ClGXY4FP26vZRJiycvPS5US5zUAKRIAKcoozYObA04lqRxnXzGKA70lDPEWDzAN wU16BbSECWjJQXmwJSWJCCmpBsbyJXwJ3zeWG683/CVndKrvsvtEdWH967pX7bmY5vBpzb3D 9sVAdanns4Zn07hESk4sXeJYv+P7PPGTv+tPVb69Lsj2/OyG/YUOpxi16iu936Yv+SpyZm6M xj9xBSmRL/tnmdn2VBSUmbOeZdWr/BUXGNM9jcWMOW5dWGZT5+sKyTLvrxcur1RiKc5INNRi LipOBABxLys9AAMAAA== Archived-At: Subject: Re: [kitten] new draft-ietf-kitten-aes-cts-hmac-sha2 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2016 18:55:00 -0000 On 01/26/2016 01:51 PM, Michael Jenkins wrote: > A new version of the subject draft has been posted. We addressed all of > the comments on -08, generally with text supplied (thanks!). All of the text changes look okay to me. The diff shows some unexpected whitespace changes, but I think that's just an artifact of page breaks occurring at different locations, or something.